VYPR

Sitecore PowerShell Extensions

by Sitecore

CVEs (1)

  • CVE-2025-34511HigJun 17, 2025
    risk 0.61cvss 8.8epss 0.14

    Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP…